Injured Workers Pharmacy Faces Legal Action Due to Email Account Breach

The law agency Morgan & Morgan filed a class-action lawsuit in the U.S. District Court for the District of Massachusetts against Injured Workers Pharmacy (IWP) in relation to a breach of the personal records of 75,771 consumers.

IWP is a drugstore located in Andover, MA that gives supplies to workers who were hurt at the workplace and acquire workers’ compensation benefits. IWP learned on May 11, 2021 that an unauthorized person accessed a few worker email accounts. The affected email accounts included sensitive data for instance names, addresses, and Social Security numbers. The breach of the initial email accounts occurred in January 2021, which granted unauthorized access to the records in the accounts for four months before IWP discovered the breach and protected the accounts. Impacted persons were given free two-year credit monitoring and identity theft protection services.

Plaintiffs Alexsis Webb and Marsclette Charley claim IWP did not use proper data security measures to secure the privacy of their personal data and that of the class members, had not observed the industry’s security recommendations and hadn’t given security awareness training to the personnel. IWP didn’t send notification letters concerning the breach up to February 2022, nine months following the breach discovery. The legal action alleges breach of fiduciary duty and implied contract, negligence, negligence per se, invasion of privacy, and unjust enrichment.

The plaintiffs state they face a forthcoming and continuing danger of identity theft and fraud as a result of the compromise of their sensitive information to cybercriminals and have had to devote time and money securing themselves versus identity theft and fraud. The lawsuit wants class-action status, a jury trial, damages, compensation for out-of-pocket expenditures, and legal costs.

IWP is acquainted with lawsuits. In 2020, IWP had a negotiation deal regarding a case with Massachusetts Attorney General Maura Healey to take care of allegations the firm played a part in delivering thousands of unlawful opioid painkiller prescriptions all over the United States from 2006 to 2012. The case was resolved for $11 million.

Link copied to clipboard
Photo of author

Posted by

Mark Wilson

Mark Wilson is a news reporter specializing in information technology cyber security. Mark has contributed to leading publications and spoken at international forums with a focus on cybersecurity threats and the importance of data privacy. Mark is a computer science graduate.